Compliance

NIS2 requires a verifiable asset register. We deliver it.

Since December 6, 2025, the NIS2 Directive has been applicable in Germany through the NIS2 Implementation Act (NIS2UmsuCG). Affected organizations must fully document vulnerability management, asset inventory, and incident reporting. LOGINventory provides the technical foundation for NIS2 compliance. With a clear line drawn around what it does and doesn’t do.

Discovery call (15 min)

last_check: 09:47:12

Requirement	Source	Status
Asset inventory (Art. 21(2)(a))	BSI / NIS2UmsuCG	Met
Vulnerability management	Art. 21(2)(e)	Met
Permissions audit trail	Art. 21(2)(i)	Met
Incident reporting 24h / 72h / 1 mo	Art. 23	Supplementary
External threat analysis	external	Not covered

What you get

What Article 21 requires. Documented straight from the inventory.

Asset register

Art. 21(2)(a).

Complete, current, verifiable. The three words straight from the statute. A daily-updated asset inventory with change history and configuration snapshots.

Vulnerability documentation

Art. 21(2)(e).

Regular CVE matching, risk-based prioritization, documented remediation. All in one workflow with the Cyber Insight integration.

Vulnerability module →

Audit reports

Compliance evidence at the push of a button.

Ready-made reports for BSI registration, permissions audit trail, compliance status. PDF and Excel. Company logo included automatically.

How it works

What the directive requires. And what LOGINventory delivers for it.

Asset management is no longer a recommendation. It’s written into the law.

The NIS2 Directive (EU) 2022/2555 is the expanded version of the original NIS Directive and strengthens cybersecurity across the entire EU. Essential and important entities are affected: they must maintain a complete, current, and verifiable inventory of all IT assets. And systematically document vulnerabilities, permissions, and incidents.

LOGINventory provides exactly this foundation: a daily-updated asset inventory, automated CVE matching (via the Cyber Insight integration), an audit trail for permission changes, compliance reports ready for BSI submission. That covers the technical requirements under Art. 21(2)(a), (e), and (i).

“The NIS2 Directive helps organizations strengthen security and resilience in networked environments. LOGINventory supports customers in efficiently meeting these requirements through the transparent documentation of the IT infrastructure.” Simon Stein, CEO LOGIN

Core NIS2 requirements. What we cover

The directive’s areas. What LOGINventory covers technically.

a / System security

Access controls, network security, data encryption. LOGINventory documents status and changes.

→ Asset register, permission reports

d / Vulnerability management

Systematic vulnerability management: regular CVE matching, risk-based prioritization, documented remediation measures.

→ Cyber Insight integration

c / Risk management

Systematic risk assessment. Based on a complete asset inventory with configuration status.

→ Inventory as the foundation

b / Incident reporting

Reporting obligations under Art. 23: 24h early warning · 72h incident notification · 1-month final report. LOGINventory supplements this. It doesn’t replace an incident response team.

○ External solution required

e / Cooperation

Mandatory cooperation with national authorities, threat information sharing. An organizational task, not a technical one.

○ Organizational

+ / Audit preparation

Pre-configured reports on license inventory, permissions, vulnerability status. As PDF or Excel.

→ Automatic delivery available

What LOGINventory does NOT cover

We’re upfront about this: LOGINventory does not replace incident-response management, does not replace external threat analysis, does not replace SIEM/SOC, and does not replace legal compliance consulting. We provide the asset and inventory foundation on which these disciplines build.

Ways to start

Prepare your NIS2 documentation before the BSI asks.

Choose whatever fits your week. Every path is no-obligation.

Whitepaper

NIS2 for IT managers.

What Article 21 requires, what you need to provide, what LOGINventory contributes.

Discovery call

15 minutes. With a technician.

We’ll go over your requirements under Article 21 together and see whether LOGINventory covers them.

Schedule a time →

Trial license

30 days. Full feature set.

Full network size, all modules, no credit card. Setup in under 30 minutes.

Request trial license →